
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a313a3a2f34382d3438203d3e203338353236.roa
File: 323430353a333734303a313a3a2f34382d3438203d3e203338353236.roa (raw, json)
Hash identifier: NwHn9lq6JY52v179/kuytomdd4mWytXK+xw7N4+83Bk=
Subject key identifier: AF:5D:8A:78:19:14:E0:3E:E6:3D:A6:41:2E:B3:DE:78:04:49:26:C1
Certificate issuer: /CN=C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7
Certificate serial: 7DCDE7B13132F72839BECAB4BA6CBEFB8430B53B
Authority key identifier: C6:32:A0:CF:4D:A7:DD:E7:7C:BC:AC:1F:36:71:16:A0:7E:3C:FF:D7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a313a3a2f34382d3438203d3e203338353236.roa
Signing time: Sun 03 May 2026 03:14:15 +0000
ROA not before: Sun 03 May 2026 03:09:15 +0000
ROA not after: Sun 02 May 2027 03:14:15 +0000
asID: 38526
IP address blocks: 2405:3740:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.crl
rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:30:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:cd:e7:b1:31:32:f7:28:39:be:ca:b4:ba:6c:be:fb:84:30:b5:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7
Validity
Not Before: May 3 03:09:15 2026 GMT
Not After : May 2 03:14:15 2027 GMT
Subject: CN=AF5D8A781914E03EE63DA6412EB3DE78044926C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:74:e7:4f:02:eb:32:f0:8d:78:8d:f0:4d:80:
0f:a9:30:05:ac:e5:c6:cb:f7:f9:ed:e9:a0:e6:f7:
76:42:d2:30:b6:ab:64:fb:28:2b:d3:cf:92:b8:35:
df:39:d5:eb:b2:4c:f4:0d:8d:46:c4:59:4f:2f:6f:
af:56:f4:64:97:47:6d:4f:ec:b9:f7:4b:cc:2b:3e:
e9:4f:3f:3d:11:40:32:dd:59:33:4d:76:95:c4:5e:
46:e7:be:5f:60:a8:12:4a:bc:80:35:0d:3b:5a:5d:
5c:f7:ec:50:e7:57:dd:21:ba:92:4f:db:37:dd:45:
bf:e7:06:26:55:36:f0:ae:e1:23:77:df:9a:bb:f1:
95:c5:57:b6:4c:80:62:70:05:d2:f5:78:4d:10:45:
1a:29:66:c8:3d:c3:3c:70:1a:3a:f7:2f:8d:c9:9e:
86:e3:97:66:6f:10:98:2a:51:3f:5d:c0:f5:8a:1a:
11:17:96:38:23:61:be:db:f0:ff:d9:81:d4:65:fc:
90:ad:c1:78:d7:ea:ec:07:35:95:ac:9a:32:13:70:
0b:09:1d:fa:4e:f2:d9:a7:71:8c:76:82:4a:71:46:
0e:cc:c3:cb:dd:55:5f:05:b5:e3:d0:72:e5:e5:c2:
5a:81:51:d6:1a:8a:be:82:3d:da:a1:60:12:31:8e:
e0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:5D:8A:78:19:14:E0:3E:E6:3D:A6:41:2E:B3:DE:78:04:49:26:C1
X509v3 Authority Key Identifier:
keyid:C6:32:A0:CF:4D:A7:DD:E7:7C:BC:AC:1F:36:71:16:A0:7E:3C:FF:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C632A0CF4DA7DDE77CBCAC1F367116A07E3CFFD7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a313a3a2f34382d3438203d3e203338353236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:3740:1::/48
Signature Algorithm: sha256WithRSAEncryption
5a:44:f5:de:58:bb:7d:0f:6b:54:4a:41:cc:35:2c:87:72:e7:
60:4f:08:5a:93:30:76:82:4a:fe:8e:4e:4b:7f:3e:dd:ce:1b:
46:29:44:80:26:c6:d0:7b:4b:69:28:3c:19:bb:4f:0e:fc:7a:
e4:37:7d:ba:3b:90:46:9f:7e:35:9f:bc:4c:c2:b7:35:3f:fb:
fe:8e:cc:fc:7c:db:a5:f0:43:0d:dc:06:56:7a:ca:fb:2a:73:
d8:0f:e8:9f:98:4a:d6:c5:8b:cd:64:0a:09:d2:72:20:04:f5:
8c:ca:44:ca:c9:32:ef:d8:c5:dd:88:cd:53:63:a3:46:d4:87:
bb:b8:df:12:f6:f2:86:26:4a:cd:a9:e6:2e:29:a1:17:41:c5:
2b:35:e8:7d:ca:a1:c4:9f:ee:6d:d1:f7:30:a1:ab:52:50:fd:
53:5d:ce:6d:3c:46:c8:0c:9e:f6:9f:de:69:ef:cf:a5:e8:e6:
a6:c3:f8:be:1e:de:7a:16:3e:07:9d:c0:a4:61:c6:f8:ed:77:
56:b5:64:96:9d:ef:ab:2e:20:c3:65:9d:2a:93:fc:02:d5:d7:
4e:e9:f8:5a:30:c8:45:23:40:7e:a5:69:2b:29:d2:04:2d:ab:
1e:d3:27:f3:f5:c0:d4:3f:5b:6c:08:68:ae:ca:73:7f:a1:ae:
8a:24:10:b3
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUfc3nsTEy9yg5vsq0umy++4QwtTswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzYzMkEwQ0Y0REE3RERFNzdDQkNBQzFGMzY3MTE2QTA3
RTNDRkZENzAeFw0yNjA1MDMwMzA5MTVaFw0yNzA1MDIwMzE0MTVaMDMxMTAvBgNV
BAMTKEFGNUQ4QTc4MTkxNEUwM0VFNjNEQTY0MTJFQjNERTc4MDQ0OTI2QzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8dOdPAusy8I14jfBNgA+pMAWs
5cbL9/nt6aDm93ZC0jC2q2T7KCvTz5K4Nd851euyTPQNjUbEWU8vb69W9GSXR21P
7Ln3S8wrPulPPz0RQDLdWTNNdpXEXkbnvl9gqBJKvIA1DTtaXVz37FDnV90hupJP
2zfdRb/nBiZVNvCu4SN335q78ZXFV7ZMgGJwBdL1eE0QRRopZsg9wzxwGjr3L43J
nobjl2ZvEJgqUT9dwPWKGhEXljgjYb7b8P/ZgdRl/JCtwXjX6uwHNZWsmjITcAsJ
HfpO8tmncYx2gkpxRg7Mw8vdVV8FtePQcuXlwlqBUdYair6CPdqhYBIxjuA3AgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUr12KeBkU4D7mPaZBLrPeeARJJsEwHwYDVR0j
BBgwFoAUxjKgz02n3ed8vKwfNnEWoH48/9cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZTY1ZTc4MTAtNjdmNC00MWMyLTgwMzQtNDY1MjczM2I4ZGQyLzAvQzYzMkEwQ0Y0
REE3RERFNzdDQkNBQzFGMzY3MTE2QTA3RTNDRkZENy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9DNjMyQTBDRjREQTdEREU3N0NCQ0FDMUYzNjcxMTZBMDdFM0NG
RkQ3LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2U2NWU3ODEwLTY3ZjQtNDFjMi04
MDM0LTQ2NTI3MzNiOGRkMi8wLzMyMzQzMDM1M2EzMzM3MzQzMDNhMzEzYTNhMmYz
NDM4MmQzNDM4MjAzZDNlMjAzMzM4MzUzMjM2LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAU3QAABMA0G
CSqGSIb3DQEBCwUAA4IBAQBaRPXeWLt9D2tUSkHMNSyHcudgTwhakzB2gkr+jk5L
fz7dzhtGKUSAJsbQe0tpKDwZu08O/HrkN326O5BGn341n7xMwrc1P/v+jsz8fNul
8EMN3AZWesr7KnPYD+ifmErWxYvNZAoJ0nIgBPWMykTKyTLv2MXdiM1TY6NG1Ie7
uN8S9vKGJkrNqeYuKaEXQcUrNeh9yqHEn+5t0fcwoatSUP1TXc5tPEbIDJ72n95p
78+l6Oamw/i+Ht56Fj4HncCkYcb47XdWtWSWne+rLiDDZZ0qk/wC1ddO6fhaMMhF
I0B+pWkrKdIELase0yfz9cDUP1tsCGiuynN/oa6KJBCz
-----END CERTIFICATE-----
Generated at Wed May 13 07:34:59 2026 by rpki-client